ad21627a8e850d91fd38df4f2ec9f5107979fd37ad0a988759901e21ecdad483

General

Target

ad21627a8e850d91fd38df4f2ec9f5107979fd37ad0a988759901e21ecdad483
Size

50KB
MD5

38faca64c9b27f538d809180495eb880
SHA1

ac9265b3d07f3346f080a128c3b7a4f4beedd9a1
SHA256

ad21627a8e850d91fd38df4f2ec9f5107979fd37ad0a988759901e21ecdad483
SHA512

3e4c193216c30f8cfc4d607d5c0033b99e2f70258046955e3cf00f5968756f3edf0a98b09e2b356a2fae731783e643f2f354caba8de9e8295184c3bac3a82235
SSDEEP

768:SPmqMEJBIemMMwssLeLJB8IAD6slEjKGJ1YYBUWuYnw5mzJSG71rPntPNR/yHs:cmqMwBIeQ14mm4LYoFnw5mNZftPNRK

Score

N/A

Malware Config

Signatures

Files

ad21627a8e850d91fd38df4f2ec9f5107979fd37ad0a988759901e21ecdad483
.dll windows x86

811b86e675d15a984b3939ebc544b45f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnmapViewOfFile
CreateFileMappingA
DeleteCriticalSection
HeapCreate
IsProcessorFeaturePresent
GetFileTime
ExitProcess
SleepEx
CreateEventA
FreeEnvironmentStringsA
InitializeCriticalSection
GetStringTypeExA
ReadFile
LeaveCriticalSection
CreateFileA
VirtualQuery
WaitForMultipleObjects
GetEnvironmentStringsA
HeapAlloc
SetFilePointer
SleepEx
MapViewOfFileEx
HeapFree
EnterCriticalSection
RtlZeroMemory
HeapDestroy

imesbdpo

ImmDestroyContext
_stricmp
_splitpath
wcstol
PifMgr_CloseProperties
ImmTranslateMessage
_tolower
ImmActivateLayout
ImmIsIME
ImmLoadIME
CtfImmIsCiceroEnabled
ImmSendIMEMessageExA
DllInstall
CtfImmSetAppCompatFlags
ImmWINNLSEnableIME
fabs
ImmCreateContext
_wcsicmp

Exports

Exports

CreateProcessNotify
atmaonce

Sections

.text
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

811b86e675d15a984b3939ebc544b45f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

imesbdpo

Exports

Exports

Sections

.text Size: 35KB - Virtual size: 36KB

.rdata Size: 1KB - Virtual size: 4KB

.data Size: 8KB - Virtual size: 8KB

.rsrc Size: 4KB - Virtual size: 8KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 35KB - Virtual size: 36KB

.rdata
Size: 1KB - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 4KB - Virtual size: 8KB

.reloc
Size: 512B - Virtual size: 4KB